Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
I am running a supported version of Windows Server. Is my system vulnerable to this issue?
Systems configured to activate both of the following features in Windows Server: CredSSP (Credential Security Service Provider) and RCG (Remote Credential Guard) might be vulnerable to this exploit.
How could an attacker exploit this vulnerability?
An authenticated attacker could exploit this vulnerability to elevate privileges and then spoof the Kerberos logon process when a remote credential guard connection is made via CredSSP over the network.
Security updates
10.0.17763.3046 — https://support.microsoft.com/help/5014692
10.0.19043.1766 — https://support.microsoft.com/help/5014699
10.0.20348.770 — https://support.microsoft.com/help/5014678
10.0.20348.770 — https://support.microsoft.com/help/5014677
10.0.22000.739 — https://support.microsoft.com/help/5014697
10.0.14393.5192 — https://support.microsoft.com/help/5014702
Vulnerabilities 1
-
High 8.8
Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2022-30165 Windows Kerberos Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30165
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss